9bba37990c2133c1956e7b969e967daa

General

Target

9bba37990c2133c1956e7b969e967daa
Size

90KB
MD5

9bba37990c2133c1956e7b969e967daa
SHA1

a5f8440f6b0105424fd701848593f4df8c754906
SHA256

cfec8de7264111de89ef6e8653434d26a68667d2f153c1a7c104082dadfe662a
SHA512

c0ffee00aad9aef807436d177252d1ff3407685bfbd72e4bc8d5049806e6ab624bd73d5acc90be667ff6bdc42a1afc550a1576c31290bf5e249f0f8dc200ee8f
SSDEEP

1536:MdGhKh0JHyoVf3hiNncyuownWgjLtHvO+TBvJ030fK+yXWoaBbov:Ma2dognc7ownWgfdG6ZK+8a2v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bba37990c2133c1956e7b969e967daa

Files

9bba37990c2133c1956e7b969e967daa
.exe windows:4 windows x86 arch:x86

44be0902b6702b62c7aa21fec2a65f46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetCommandLineA
HeapFree
Sleep
DeleteFileA
GlobalAlloc
HeapAlloc
GetStdHandle
lstrlenA
lstrcmpiA
GetLastError
WideCharToMultiByte
FreeLibrary
GetLocalTime
lstrcatA
GetFileAttributesA
GetStringTypeA

user32

CloseWindow
GetDlgItem
CopyIcon
DrawIcon
CreateIcon
IsWindow
DialogBoxParamW
LoadMenuA
CopyImage
InsertMenuA
DrawTextW
GetCursor
CalcMenuBar
DialogBoxParamA
DrawIconEx
EndDialog
GetDC

comctl32

ImageList_LoadImageA
ImageList_GetIcon
ImageList_Destroy
ImageList_AddIcon
ImageList_DragMove
ImageList_BeginDrag
ImageList_Read
ImageList_DragShowNolock
ImageList_Remove
ImageList_GetImageInfo
ImageList_Merge
ImageList_Draw
ImageList_DrawEx
ImageList_Create
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_DragLeave
ImageList_Copy
ImageList_DragEnter
InitCommonControls

advapi32

RegQueryValueExA
RegReplaceKeyW
RegCreateKeyExW
RegQueryValueW
RegDeleteKeyW
RegEnumKeyExW
RegEnumKeyA
RegEnumKeyExA
RegQueryValueA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegEnumValueW
RegLoadKeyA
RegFlushKey
RegReplaceKeyA
RegEnumKeyW

Sections

.rbIZkP
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VVLczB
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pwJvfG
Size: 3KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NzCU
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44be0902b6702b62c7aa21fec2a65f46

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.rbIZkP Size: 14KB - Virtual size: 13KB

.VVLczB Size: 66KB - Virtual size: 66KB

.pwJvfG Size: 3KB - Virtual size: 125KB

.NzCU Size: 2KB - Virtual size: 2KB

.rbIZkP
Size: 14KB - Virtual size: 13KB

.VVLczB
Size: 66KB - Virtual size: 66KB

.pwJvfG
Size: 3KB - Virtual size: 125KB

.NzCU
Size: 2KB - Virtual size: 2KB